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We present the wavelength attack on practical continuous variables quantum key distribution 
system with heterodyne protocol, in which the transmittance of beam splitters at Bob's station is 
wavelength-dependent. Our strategy is proposed independently analogous to that of Han's group 
(arxiv: 1206.6550vl), but in Han's paper the shot noise of the two beams that Eve sends to Bob 
transmitting after the homodyne detectors is unconsidered. However, shot noise is the main con- 
tribution to the deviation of Bob's measurements from Eve's when implementing the wavelength 
attack, so it must be considered accurately. In this paper, we firstly analyze the solutions of the 
equations specifically that must be satisfied in this attack, which is unconsidered rigorously in Han's 
paper. Then we calculate the shot noise of the homodyne detectors accurately and conclude that 
the wavelength attack can be implemented successfully in some parameter regime. 

PACS numbers: 03.67.Hk, 03.67.Dd, 89.70.Cf 
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I. INTRODUCTION 

Continuous variables quantum key distribution 
(CVQKD), which is an alternative of single photon 
quantum key distribution (QKD), has many advantages, 
such as high repetition rate of communication, high 
detection efficiency and ease of integration with standard 
telecom components, so it has been paid much more 
attention in recent years [H-Q]- However, in practical 
system because there exist some imperfections such as 
loss or noise, the unconditional security of final key of 
QKD may be compromised. It is extensively investigated 
m sing le photon QKIX like PNS attack etc. [1-Q3, but 
not more in CVQKD This is because the system 

of CVQKD is one way communication system and needs 
less optical elements than two ways. Furthermore, most 
of intervention of Eve on the system of CVQKD can 
be detected by the parameter estimation of classical 
post-processing of CVQKD. 

In Ref. ill], the wavelength-dependent property of 
beam splitter (BS) was explored by eavesdropper Eve 
to attack single photon QKD successfully. Subsequently, 
Han's group extended this attack, so called wavelength 
attack, to the all-fiber system of CVQKD [16|. However, 
in Han's paper, there exist two significant problems not 
being considered. First, the equation that must be satis- 
fied in this attack, so called attacking equation, was not 
solved specifically in some permitted parameter regime, 
which may make this attack invalid. Second, the shot 
noise of the two beams that Eve sends to Bob, when 
transmitting through the homodyne detectors, was ne- 
glected too. However, shot noise is the main contribu- 
tion to the deviation of Bob's measurements from Eve's 
when implementing the wavelength attack, so it must be 
considered accurately. 

In this paper, we demonstrate and resolve the two 



problems of Han's paper, and then we improve the wave- 
length attack method against all-fiber CVQKD system 
by tuning the attacking parameter's regime. Finally, we 
conclude that the wavelength attack will be implemented 
successfully in some parameter regime. The following 
is organized as: In Sec. [Hi we demonstrate the wave- 
length attack and solve the attacking equations specifi- 
cally. Then, we analyze the shot noise introduced by the 
one-port and two-port homodyne detectors and calculate 
the conditional variance between the two legitimate par- 
ties Alice and Bob considering the deviations introduced 
by the shot noise. Finally, in Sec. Mil we make some 
discussions and conclusions about the feasibility of this 
wavelength attack on practical CVQKD system based on 
the conditional variance obtained in Sec. Ill Bl 



II. WAVELENGTH ATTACK ON PRACTICAL 
CVQKD SYSTEM 

A. Scheme of wavelength attack 

In practical CVQKD system, Alice first modulates a 
coherent state (xa,Pa) by amplitude and phase modu- 
lators according to bivariatc Gaussian distributions cen- 
tered on (xaiPa) of variance VaNq, where Nq is the shot 
noise variance that appears in the Heisenberg relation 
AxAp > N B, 



X A 
PA 



■■ X A 
PA - 



" xfj, 
Pi- 



(1) 



' nmliang@nudt.edu.cn 



And ((x^) 2 ) = iV ,((p^) 2 ) = N , then, she sends this 
state to Bob through a quantum channel optical fiber and 
Bob implements a homodyne or heterodyne detection af- 
ter receiving this state. So, after many repetitions, Alice 
and Bob can share trains of correlated data and then 
get the final key after the classical data post-processing 
procedure. However, because the practical system may 
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FIG. 1. (Color online)Wavelength attack setup on practical 
CVQKD system with heterodyne detection (dashed red line 
indicates signal beam and solid red line local oscillator ~1 [l6l] . 
LD: laser diode; AM: amplitude modulator; PM: phase modu- 
lator; FM: Faraday mirror; BS: beam splitter; PBS: polariza- 
tion beam splitter; PC: polarization controller; D: photode- 
tector. 



have some imperfections which will leave the loophole to 
the potential eavesdropper Eve, we must timely calibrate 
the system carefully and make efforts to eliminate all the 
existing loopholes. 

Generally, the transmittance of some practical beam 
splitters depends on the wavelength of beams, namely 
T = F 2 sin 2 (£2i!|!±) ee T(A), where F 2 is the maximal 
power that is coupled ,c is the coupling coefficient, to is 
the heat source width [lj], [Hj]. Consequently, as Ref. [l6[ 
proposed, Eve can use this wavelength dependent prop- 
erty to attack the practical CVQKD system with hetero- 
dyne protocol shown in Fig. [T] She can send two beams 
whose wavelength and intensity can be tuned to control 
Bob's measurement results, which are made identical to 
Eve's. 

Specifically speaking, Eve first intercepts Alice's send- 
ing states and makes a heterodyne detection on them, so 
she can get the quadratures xe,Pe, which can be given 
by 



x E = xa 
Pe = PA - 



Pn, 



(2) 



where ((x§) 2 ) — ^((pj^) 2 ) = N is the shot noise 
introduced by Eve's heterodyne detection. Then, she 
sends to Bob two beams whose intensities are denoted 
as \a' s \ 2 and lc/^1 2 respectively. Because the interfer- 
ence between these two beams are destroyed, Eve might 
be able to control the intensities and wavelength of them 
to make these two beams, after transmitting Bob's het- 
erodyne detectors, satisfy 

(l-r 1 Xl-2T 1 ]a' s | 2 -(I-T 2 Xl-2r 2 ^i | 2 = ^l«io|, 
T x {\ - 2T 1 )\a' s \ 2 - T 2 (l - 2T 2 )\a' w \ 2 = ^jp E \a w \, 

(3) 

where 7T(T2) represents the transmittance of practical 
beam splitter corresponding to the beam a^a'^) whose 



wavelength is Ai(A 2 ). olio is the amplitude of local oscil- 
lator in absence of this wavelength attack, r\ is the chan- 
nel loss. After scaling with \Fla rn [l6j . then, Bob will 
get measures y/rjxE/V^ and ^/rjpE/V^- Thus, the wave- 
length attack may succeed, however, whether Eqs. (fJJ 
have the real solutions or not in practical parameter 
regime determines the validity of this wavelength attack. 
So, in what follows we'll analytically investigate the so- 
lutions of Eqs. (f5J) in permitted parameter regime. 
First, we rewrite Eqs. © as 

(i-r 1 Xi™2T 1 ]a' s | 2 =^l«iol+(i-^Xi-2r 2 ^i | 2 , 

Ti(l - 2T 1 )\a' s \ 2 = ^)p E \a w \ + T 2 (l - 2T 2 )\a l LD \ 2 . 

(4) 

Provided a'jjj is the same as ajx>, then T 2 is 1/2, Eqs. (TJ| 
will be reduced to 



(5) 



(1 - Ti)(l - 27i)|c4| 2 = y/rjxElauol 
T 1 (l-2T 1 )|a' s | 2 =y/vp E \a w \. 

As Ref. [16| says, generally, xe,Pe are very small in prac- 
tical implementation of CVQKD, Eqs. ([5]) are always 
solvable if xe,Pe are both positive or negative at the 
same time. That's 

1 — r n Xr Pe r 

1 1 e[0,i]. (6) 
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However, when x e ,Pe are different in sign, TigjO, 1]. But 
by virtue of opting for an appropriate T 2 (7^ 1/2), we are 
always able to confirm both of the right hand side of 
Eqs. (fJJ being either positive or negative at the same 
time, because both the second term on the right hand 
side of Eqs. ((4]) are the same in sign. Hence, Eqs. (f4|) or 
Eqs. d3j always hold if we select appropriate a'^. 

Additionally, we point out that we can always make 
the right hand side of Eqs. enough small and T 2 close 
to 1/2, thus |o:g| 2 in the left hand of Eqs. (HJ can always 
be small too, especially in discrete modulation protocol 
of CVQKD [i,[5| in which the signal intensity is always on 
single photon level. Consequently, this attack cannot be 
avoided efficiently even if Bob added a wavelength filter 
on his system before detectors, which is the same case in 
Ref. [15|]. Because such extreme weak signal is still able 
to transmit through practical filter just by increasing the 
intensity of the incoming light and the wavelength of fake 
local oscillator can be close to the original one which is 
1550nm. Laser after transmitting through the practical 
filter is permitted to have a line width, so the fake local 
oscillator cannot be filtered either. 

Consequently, implementing this wavelength attack, 
theoretically, Eve can control her attacking parameters 
to make Bob's measurements identical with her or rather 
Eve completely knows Bob's measures. However, in 
Eqs. (fJJ we don't consider the interference between Eve's 
sending beams and vacuum mode entering from other 
port of beam splitters of Bob's apparatus as Fig.[T]shows, 
which could introduce excess noise into Bob's measure- 
ments, thus leading them deviate from Eve's. We will 
demonstrate it in next section. 
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B. Deviation of Bob's measurements from Eve's 
and Alice's 

As the previous section demonstrated, the interference 
with vacuum mode will lead Bob's measurements deviate 
from Eve's. And if the deviation is unfortunately large, 
Alice and Bob will find that they can't distill any secure 
keys because Bob's measures are too noisy from her af- 
ter comparing partial data within parameter estimation 
phase of data post-processing. So, we must calculate 
the conditional variance between Alice and Bob to see 
whether Eve's wavelength attack could be successful or 
not. And we point out that the shot noise introduced 
by Bob's detectors is the main contribution of the condi- 
tional variance, which is not noted in Han's paper. We 
begin this calculation by analyzing the quantum noise of 
unbalanced homodyne detectors first and use the results 
to apply to Bob's apparatus. 



1. Quantum noise on unbalanced homodyne detectors 

Homodyne detectors are extensively exploited to mea- 
sure weak signal with bright local oscillator [19M21] . As 
depicted in Fig. [2j when the transmittance of beam split- 
ter T = l/2, the homodyne detectors are balanced homo- 
dyne detectors(BHD), or else are unbalanced homodyne 
detectors (UBHD). Fig. Eta) is two-port homodyne de- 
tectors with a subtractor, and Fig. [2jb) is one-port ho- 
modyne detectors without subtractor. Those two-port 
or one-port homodyne detectors can be used to measure 
weak signal's quadratures or vacuum state's quantum 
noise. 

Generally, two-port balanced homodyne detectors can 
measure the quadratures xa or pa of weak signal as , 
between which and the local oscillator the relative phase 



is 9. The measurement is 

x e = 2\aio\{x m cos6> + p in sin 9), (7) 

and Xi n = xa + XN,Pin = PA + pn ■ xnjJPn are the vac- 
uum noise, of which the variance is Nq [2l| . The variance 
of 

%in i Pin IS 




LO 10 
(a) two-port (b) one-port 



FIG. 2. (Color online) Unbalanced homodyne detectors with 
(a) two-port or (b) one-port. 

(4.) = (4) + (*n) = v a + N , 

(pI) = (pa) + (p 2 n)=Va + N , 

where Va is the signal's variance. When Va = 0, the 
output is the shot noise Nq. However, with unbalanced 
two-port homodyne detectors, the measurement will be 
different from the one in Eq. (J7J. The follows are the 
analysis of this case. Since the amplitude of signal and 
local oscillator can be designated by 

aLO = \a w \e-^ t+e \ 

of which cj) and 9 are the modulated phase respectively, 
after transmitting the beam splitter, the intensity of local 
oscillator and signal can be written as 



h = \VT^Ta s + Vf aLO \ 2 = (1 - T)\a s \ 2 + T\ aLO \ 2 + y/T(l - T)(a%aw + a w a s ) 
= (1 - T)|a s | 2 + T\a w \ 2 + ^T{1 - T) x 2\a w \{x ln cos9 + p m sin0), 

h = \VTa s - VT^Tazol 2 = 7> s | 2 + (1 - T)\a w \ 2 - y/T(l -T)(a* s a w + a* w a s ) 
= T\a s \ 2 + (1 - T)\ aLO \ 2 - y/T{l-T) x 2\a w \(x m cos6+p in sind). 



Then, with the subtraction of I\ and I2, the output can 
be obtained as 

X = 2VT(1 - Tjxg + (1 - 2T){\a s \ 2 - \aro\ 2 ), (11) 

where xg has been given by Eq. ([7]) and when T = 1/2 
Eq. (fTTj) is reduced to Eq. (JT)). If the weak signal is 
vacuum state, the amplitude of it can be read as as — 
(as) +Sas, and (as) — 0, so xa = Pa = and |«s| 2 = 
|5a,s| 2 = \Sa\ 2 << \aio\ 2 . Sa describes the amplitude 



fluctuation of vacuum state. Neglect its square terms, 
then the output of UBHD is 



X = 2v/T(l - T)x' g - (1 - 2T)\ aLO \ 2 , (12) 

where x' g is obtained from Eq. J7f by ii = Pa = 0. 
When 9 is selected to be or tv/2, we can get the shot 
noise of the output 4T(1 - T)N denoted as (AA) 2 or 
(AP) 2 ((AA) 2 = (AP) 2 = 4T(1 - T)N ), which is con- 
sistent with the one of BHD output when T= 1/2 . The 



4 



right hand of Eq. (fl2|) except the first term is the two 
ports' subtraction of the intensity of local oscillator be- 
cause of the unbalanced splitting rate of the asymmetric 
beam splitter (ABS). 

Subsequently, let's analyze the unbalanced one-port 
homodyne detectors. As shown in Fig. EJb), the inten- 
sity of local oscillator and signal after transmitting the 
unbalanced beam splitter respectively has been already 
obtained by Eq. ([TO)) . When the weak signal is vacuum 
state, the intensity of Eq. (fTU)) can be reduced to 

h = T\a w \ 2 + v/T(i - T)2\a w \X N , 

h = (1 - T)\aLo\ 2 - VT(1 - T)2\ aio \X N , 

where Xjy € {xn,Pn} and 9 has been selected to be 
or 7r/2. The right hand side of Eqs. (fT5)l , except the first 
term which is unbalanced part of splitting of the bright 
local oscillator because of asymmetric splitting rate of 
ABS, is the fluctuation of each port of unbalanced one- 
port homodyne detectors respectively. With the two-port 
and one-port UBHD, we can compute the noise of the 
beams Eve sends to Bob in the next section. However, 
keep in mind that the noise of UBHD is introduced by the 
vacuum state from the other input port of asymmetric 
beam splitter of UBHD. 

2. Conditional variance between Alice and Bob 

Looking back to see Fig. [T] again, it's clear that there 
are two types of UBHD. On one hand, the first ABS at 



Bob's station through which the signal or local oscilla- 
tor transmits alone can be viewed as one-port UBHD, 
and each port output is the interference between vac- 
uum state and either signal or local oscillator. So, as 
Sec. Ill B II analyzed, the intensity of first ABS output 
is (taking the signal beam as an example and the local 
oscillator is analogous), 



r s = (l- Ti)/ S - 2 y /T 1 (l-T 1 )I s X rf , 



And Is is the intensity of the signal beam Eve sends, 
that's Is — Ws\ 2 - On the other hand, the second ABS 
is two-port UBHD, but the output is the interference be- 
tween signal beam and vacuum state in addition to the 
one between local oscillator and vacuum state, because 
the wavelength of signal beam and local oscillator is dif- 
ferent from each other and they can't interfere with each 
one. Recalling that the shot noise amplitude of the two- 
port UBHD output is AX T or AP T as shown in Eq. (fT2l) . 
scaling with v2|o!io| (cf. Eq. generally, for hetero- 
dyne detection LO is split into two beams so its intensity 
should be divided by two), the measurements of Bob's 
detection are 



Ai 



XB 



(1 - 2Ti)Ig - (1 - 2T 2 )r w + 2^F S AX S + 2^T^AX W 



V2q\ 



OtbO\ 



V2\ 



OLIO\ 



r), (1 - 2T 1 )(-2^T 1 (l-T 1 )/ s A A r) - (1 - 2T 2 )(~2^/T 2 (1-T 2 )I W X N ) + 2^AX S + 2^F^AX W 
2 XE + 



V2\ 



awl 



PB 



-X E + X B \E , 

Ai (1 - 2Ti)J| - (1 - 2T 2 )/1 + 2^fP s AP s + 2^I\^AP W 



OLIO\ 



V2\ 



awl 



V~ (l~2T 1 )(2^T 1 (l-T 1 )I s X N )-(l-2T 2 )(2^T 2 (l-T 2 )I w X N ) + 2^AP S + 2^I^AP LO 
2 PE V2\aLo\ 

~Pe+Pb\e , 



(15) 



where Ai is the subtraction of two port outputs of UBHD tion of xb or ps from xe or j>e- The conditional variance 
proportional to the intensity difference of two beams and of Bob's measurements conditioned on Eve's can be com- 
the proportional constant is q. £b\e ° r Pb\e is the devia- puted as 
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B\E 



J B\E 



(1-2T 1 )(-2 x /T 1 (1-T 1 )7 s ^jv) 



2\a w \ 



(l-2T 2 )(-2y/T 2 (l-T 2 )IioX N j\ +4F s (AX s ) 2 +4 : I r LO (AX w 



2\ aLO \ 2 

2r 2 (l - T 2 ){1 - 2T 2 ) 2 I LO N + 2(1 - T^J^TMl - T 2 )iV ] 

\aw\ 2 

« 2T 2 (1 - T 2 )(l - 2T 2 ) 2 A + 8T 2 (1 - T 2 ) 2 iV , 



(16) 



The third line holds because Is, Is << l a io| 2 j an d the 
forth line can be reduced for providing that the intensity 
of fake local oscillator (ijx> = la'^l 2 ) Eve sends is the 
same as the original local oscillator (|a£o| 2 ). Under this 
assumption, Vg, E is equivalent with Vg, E and both of 
them can be denoted as V B \ B f° r short. 

In order to obtain the conditional variance (Vbu) of 
Bob's measurements conditioned on Alice's random op- 
tional Gaussian variables x a or pa, we can substitute 
Eq. {U and © to Eq. (JT5J) to achieve Bob's measure- 
ments about Alice's mode. That's 



x B 



PB 



~(x A + %N + xfl) + X B \E ■ 



■^(pa+Pn + Pn) +Pb\e 



(17) 



Then, we can get the conditional variance V b \a 



V B \A = ( (x B 



VN + Vi 



B\E- 



(18) 



Interestingly, it's clear that V b \e is always smaller than 
VgiA) so the information between Bob and Eve is always 
much larger than that between Bob and Alice, which is 
consistent with the strategy Eve implements intercept- 
and-resend attack combined with wavelength attack that 
Eve totally knows Bob's measurements except some small 
deviation V b \e- We will analyze this deviation accurately 
and investigate how Eve hides herself with this attack in 
next section. 



III. DISCUSSION AND CONCLUSION 

As previous sections analyzed, if Eve implements this 
wavelength attack against Bob's practical system, the 
conditional variance V b \e in Eq. (fT6|) versus the trans- 
mittance T 2 (comparing to the local oscillator) of ABS 
on Bob's side is plotted in Fig. [3] 

When T 2 equals 0.15 or 0.5, V B \ B will be N and can 
reach the maximum value 1.24A^o when T 2 equals 0.3. 
In practical heterodyne protocol of CVQKD, the secure 
conditional variance V b \a is always iVo except for some 
small excess noise eNq. Consequently, Eve must select 




Transmittance T 



FIG. 3. (Color online) Conditional variance Vb\e vs - the 
transmittance T2 of ABS on Bob's side. Inset are the first 
term (upside) and the second term (downside) of Eq. (|16p 



appropriate T 2 making V B \ B equal (l—r])No, then she can 
hide herself completely and get all information between 
Alice and Bob. Moreover, as Sec. [TT] analyzed, different 
values of T 2 can always make Eq. ([3]) satisfied namely 
Eve could implement this wavelength attack successfully 
in any case. Besides, from Eq. (fTo) . it can be concluded 
that the main contribution to conditional variance V B \ B 
is the shot noise of two beams (especially local oscillator 

l a zol 2 ' l a sl 2 << l a zol 2 ' so tne sn °t n °i se contributed by 
weak signal a' s can be neglected) transmitting through 
the two-port UBHD , and the noise introduced by the 
first ABS of Bob's side (as one-port UBHD) (Fig. Hupside 
inset) can be neglected because of the large denominator 
|aio| 2 proportional to 10 8 iV [|[- Additionally, if Eve 
could reduce the intensity of two sending beams which 
are both smaller than the original local oscillator |azo| 2 , 
the conditional variance V B \ B can be decreased to any 
extent because the shot noise after being enlarged by the 
intensity of beam a' s or a'jjj becomes small. And Eve can 
explore the wavelength-dependent property of additional 
monitoring ABS (splitting rate may be 1:99) to make the 
monitor recording intensity of the beam a' s or a'jjj keep 
unchanged. 

In conclusion, we investigate the feasibility of wave- 
length attack combined with intercept-resend method on 
practical CVQKD system with heterodyne protocol and 
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conclude that this attack will be implemented success- 
fully if we choose appropriate transmittance T 2 corre- 
sponding to the appropriate wavelength of fake local os- 
cillator. This attack can be implemented successfully due 
to several reasons. First, we analyzed the solution of 
equations that two sending beams by Eve satisfied and it 
can be clearly seen that the solutions satisfying all con- 
ditions exist. Second, the main contribution of deviation 
of Bob's measurements from Eve's is due to the fake lo- 
cal oscillator's enlarging shot noise and can be reduced 
by selecting appropriate transmittance T 2 or decreasing 
the intensity of fake local oscillator. These two aspects 
are unconsidered in Han's paper, which may leads their 
scheme invalid in some parameter regime. Last but not 
least, the transmittance of practical beam splitters at 
Bob's station is wavelength-dependent. However, if Bob 



inserts optical filters on his system before receiving the 
light, this attack cannot be avoided efficiently as ana- 
lyzed in Sec. Ill Al which is considered to be impossible in 
Han's paper. So using high quality filters and wavelength 
independent beam splitters in practical CVQKD systems 
and carefully monitoring local oscillator are very impor- 
tant to confirm the security of the heterodyne protocol 
of CVQKD. 
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